The IP security configuration files for a TCP/IP stack that has
the IPSECURITY parameter defined can be modified while the stack is
active in the following ways:
- Policy Agent configuration, including IP security, is updated
at each configured refresh interval that is specified on the TcpImage
statement for local policies or on the DynamicConfigPolicyLoad statement
for remote policies. The default is 30 minutes.
- If Policy Agent was started with the -i option
and the configuration files are stored in a z/OS® UNIX file,
changes to any of the configuration files are detected and updated
dynamically without user intervention. The -i option
has no effect when the policies are stored in remote configuration
files on the policy server.
- Policy Agent configuration, including IP security, can be updated
at any time by issuing the MODIFY PAGENT,REFRESH command or the MODIFY
PAGENT,UPDATE command from the console of the policy client.